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Amendments to the Claims: 

The listing of claims below replaces prior versions of claims in the 
application: 



1 . (currently amended) A method comprising: 
receiving a plurality of events; 

applying the plurality of events to a correlation function, wherein the 
correlation function is implemented as a state machine and is configured to 
correlate the plurality of events ; and 

generating a specific event if the correlation function is satisfied by the 
plurality of events. 

2. (original) A method as recited in claim 1 wherein the correlation 
function is a class object. 

3. (original) A method as recited in claim 1 further including: 
receiving a data element; and 

applying the data element and at least one of the plurality of events to the 
correlation function. 

4. (original) A method as recited in claim 1 further including: 
receiving a plurality of data elements; and 

applying the plurality of data elements and the plurality of events to the 
correlation function. 
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5. (original) A method as recited in claim 1 further including 
communicating the specific event to at least one event consumer that subscribed to 
the specific event. 

6. (original) A method as recited in claim 1 further including 
continuing to receive additional events and apply the additional events to the 
correlation function if the correlation function is not satisfied by the plurality of 
events. 

7. (original) A method as recited in claim 1 further including 
resetting the correlation function after generating a specific event. 

8. (original) A method as recited in claim 1 further including: 
creating an instance of a particular state machine; and 

defining transitions for the particular state machine by subscribing to at 
least one event. 

9. (original) A method as recited in claim 8 further including 
applying an update consumer to the particular state machine to update the state of 
the particular state machine. 
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10. (original) One or more computer-readable memories containing 
a computer program that is executable by a processor to perform the method 
recited in claim 1 . 

1 1 . (currently amended) A method comprising: 
receiving a plurality of events; 

receiving a plurality of data elements; 

identifying a plurality of correlation functions configured to correlate the 
plurality of events and the plurality of data elements ; 

applying the plurality of events and the plurality of data elements to the 
plurality of correlation functions; and 

generating a specific event if at least one of the plurality of correlation 
functions is satisfied. 

12. (original) A method as recited in claim 11 wherein each of the 
plurality of correlation functions is implemented as a state machine. 

13. (original) A method as recited in claim 11 wherein each of the 
plurality of correlation functions is an instance of a class object. 

14. (original) A method as recited in claim 11 further including 
communicating the specific event to at least one event consumer that subscribed to 
receive the specific event. 
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15. (original) A method as recited in claim 1 1 further including: 
receiving additional events; 

receiving additional data elements; and 

applying the plurality of events, the additional events, the plurality of data 
elements and the additional data elements to the plurality of correlation functions. 

16. (original) A method as recited in claim 0 further including: 
receiving additional events; 

receiving additional data elements; 
receiving additional correlation functions; and 

applying the plurality of events, the additional events, the plurality of data 
elements and the additional data elements to the plurality of correlation functions 
and the additional correlation functions. 

17. (original) A method as recited in claim 16 further including 
generating the specific event if at least one of the plurality of correlation functions 
or at least one of the additional correlation functions is satisfied. 

18. (original) A method as recited in claim 11 wherein the specific 
event generated is dependent on which correlation function is satisfied. 
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19. (original) One or more computer-readable memories containing 
a computer program that is executable by a processor to perform the method 
recited in claim 1 1 . 

20. (original) A method comprising: 

identifying a schema for creating state machines, the state machines to 
correlate at least two events; 

creating an instance of a particular state machine; 

defining transitions for the particular state machine by subscribing to at 
least one event; and 

applying an update consumer to the particular state machine to update the 
state of the particular state machine. 

21. (original) A method as recited in claim 20 further including 
deleting the particular state machine if the particular state machine reaches a final 
state. 

22. (original) A method as recited in claim 20 wherein the particular 
state machine includes a timer, the method further including deleting the particular 
state machine if the timer expires. 

23. (original) A method as recited in claim 20 wherein the particular 
state machine correlates at least one event and at least one data element. 
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24. (original) A method as recited in claim 20 wherein the particular 
state machine correlates a plurality of events and a plurality of data elements. 

25. (original) A method as recited in claim 20 further including 
determining a current state of the particular state machine. 

26. (original) A method as recited in claim 20 wherein the particular 
state machine is an instance of a class object. 

27. (original) One or more computer-readable memories containing 
a computer program that is executable by a processor to perform the method 
recited in claim 20. 

28. (currently amended) An apparatus comprising: 
a plurality of event consumers; and 

an event correlator coupled to the plurality of event consumers, the event 
correlator to receive events from at least one event source and to receive data 
elements from at least one data source, the event correlator further to receive at 
least one correlation function configured to correlate events and data elements and 
to apply the received events and the received data elements to the correlation 
function, wherein the event correlator generates a specific event if the received 
events and the received data satisfy the correlation function. 
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29. (original) An apparatus as recited in claim 28 wherein the event 
correlator communicates the specific event to the plurality of event consumers. 

30. (original) An apparatus as recited in claim 28 wherein the event 
correlator communicates the specific event to event consumers that have requested 
to receive the specific event. 

31. (original) An apparatus as recited in claim 28 wherein the event 
correlator communicates the specific event to a plurality of filters, wherein each of 
the plurality of filters is associated with one of the plurality of event consumers. 

32. (original) An apparatus as recited in claim 28 wherein the event 
correlator includes at least one state machine to implement the correlation 
function. 

33. (original) An apparatus as recited in claim 28 wherein the event 
correlator includes at least one state machine to implement the correlation 
function, wherein the event correlator identifies a current state of each state 
machine. 
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34. (original) An apparatus as recited in claim 28 wherein the event 
correlator continues to receive additional events and additional data elements and 
apply the additional events and the additional data elements to the correlation 
function. 

35. (currently amended) One or more computer-readable media having 
stored thereon a computer program that, when executed by one or more 
processors, causes the one or more processors to: 

receive a plurality of events; 

identify a plurality of correlation functions configured to correlate the 
plurality of events ; 

apply the plurality of events to the plurality of correlation functions to 
determine whether any of the plurality of correlation functions are satisfied by the 
plurality of events; and 

generate a specific event if one of the plurality of correlation functions is 
satisfied by the plurality of events. 

36. (original) One or more computer-readable media as recited in 
claim 35 wherein the plurality of correlation functions are implemented as state 
machines. 
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37. (original) One or more computer-readable media as recited in 
claim 35 wherein each of the plurality of correlation functions is implemented as a 
state machine, and wherein the state machine is a class object. 

38. (original) One or more computer-readable media as recited in 
claim 37 further causing the one or more processors to identify a current state of 
the state machine. 

39. (original) One or more computer-readable media as recited in 
claim 35 further causing the one or more processors to: 

create a new instance of a state machine to implement a particular 
correlation function; and 

define transitions for the new instance of the state machine by subscribing 
to at least one event. 

40. (new) A method comprising: 
receiving events from event providers; 
correlating the events using a function; and 
if the events are correlated, 

generating an additional event; and 

sending the additional event to an event consumer. 

41 . (new) The method as recited in claim 40, further comprising: 
receiving data from the event providers; 
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correlating the events and the data with the function; and 

if at least one event and the data are correlated, generating the additional 

event. 

42. (new) The method as recited in claim 40, wherein the additional 
event is sent to the event consumer through a filter associated with the event 
consumer. 

43. (new) The method as recited in claim 40, wherein the event 
consumer includes at least one of an event logging consumer, an event forwarding 
consumer, a mail consumer, and a scripting consumer. 
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